Securing public facing weblogic server

We have deployed a public facing web server and had an attempted hack directed at the java folder. I am curious what you have done to prevent such a situation. We have gone through all of the hardening documents but still concerned. AMS was suggested but the cost is was too high for our little implementation. Thank you in advance.